Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00156.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Qualcomm, Inc. Snapdragon unaffected
Version Status Constraints
AR8035 affected —
C110100 affected —
Cologne affected —
CQ7790 affected —
CQ7790M affected —
CQ8725S affected —
CQ8750M affected —
CQ8845S affected —
FastConnect 6200 affected —
FastConnect 6700 affected —
FastConnect 6900 affected —
FastConnect 7800 affected —
FWA Gen 3 Ultra Platform affected —
FWA Gen 5 Elite Platform affected —
G2 Gen 1 affected —
G3x Gen 2 affected —
IQ8 Series Platform affected —
IQ9 Series Platform affected —
IQX5121 affected —
IQX7181 affected —
Kobuk affected —
MBM715 affected —
Milos affected —
Milos_IOT affected —
Monaco_IOT affected —
Netrani affected —
Orne affected —
Palawan25 affected —
Pandeiro affected —
Q-7790 affected —
QCA0000 affected —
QCA6391 affected —
QCA6698AQ affected —
QCA8081 affected —
QCA8337 affected —
QCA8386 affected —
QCC2070 affected —
QCC2073 affected —
QCC2076 affected —
QCC5161 affected —
QCC6705 affected —
QCC710 affected —
QCC711 affected —
QCC7225 affected —
QCF8001 affected —
QCN6224 affected —
QCN6274 affected —
QCN9011 affected —
QCN9012 affected —
QCS6690 affected —
QCS8550 affected —
QFW7114 affected —
QFW7124 affected —
QLN1083BD affected —
QLN1086BD affected —
QMP1000 affected —
QMP2001 affected —
QPA1083BD affected —
QPA1086BD affected —
Qualcomm FastConnect 8800 Mobile Connectivity System affected —
QXM1083 affected —
QXM1086 affected —
QXM1093 affected —
QXM1094 affected —
QXM1095 affected —
QXM1096 affected —
S3 Gen 2 Sound Platform affected —
S3 Sound Platform affected —
S5 Gen 2 Sound Platform affected —
S5 Sound Platform affected —
SAR1165P affected —
SAR2130P affected —
SC8380XP affected —
SDX81 affected —
SM6450P affected —
SM6475P affected —
SM6475Q affected —
SM6650P affected —
SM6850 affected —
SM7435 affected —
SM7435P affected —
SM7525 affected —
SM7550 affected —
SM7550P affected —
SM7635P affected —
SM7675 affected —
SM7675P affected —
SM7750P affected —
SM8550P affected —
SM8635 affected —
SM8635P affected —
SM8650Q affected —
SM8735P affected —
SM8750P affected —
SM8845P affected —
SM8950 affected —
SM8950P affected —
Snapdragon 6 Gen 1 Mobile Platform affected —
Snapdragon 6 Gen 3 Mobile Platform affected —
Snapdragon 6 Gen 4 Mobile Platform affected —
Snapdragon 7 Gen 4 Mobile Platform affected —
Snapdragon 7s Gen 3 Mobile Platform affected —
Snapdragon 8 Elite affected —
Snapdragon 8 Elite Gen 5 affected —
Snapdragon 8 Gen 2 Mobile Platform affected —
Snapdragon 8 Gen 3 Mobile Platform affected —
Snapdragon 8 Gen 5 affected —
Snapdragon 8+ Gen 2 Mobile Platform affected —
Snapdragon AR1 Gen 1 Platform affected —
Snapdragon AR1+ Gen 1 Platform affected —
Snapdragon S7 Sound Gen 1 Platforms affected —
Snapdragon X2 Elite affected —
Snapdragon X72 5G Modem-RF System affected —
Snapdragon X75 5G Modem-RF System affected —
Snapdragon Reality Elite Platform affected —
SW-only affected —
SXR2230P affected —
SXR2250P affected —
WCD9340 affected —
WCD9370 affected —
WCD9371 affected —
WCD9375 affected —
WCD9378 affected —
WCD9378C affected —
WCD9380 affected —
WCD9385 affected —
WCD9390 affected —
WCD9395 affected —
WCN3988 affected —
WCN6450 affected —
WCN6650 affected —
WCN6755 affected —
WCN7760 affected —
WCN7860 affected —
WCN7861 affected —
WCN7880 affected —
WCN7881 affected —
WCN8841 affected —
WSA8810 affected —
WSA8815 affected —
WSA8830 affected —
WSA8832 affected —
WSA8835 affected —
WSA8840 affected —
WSA8845 affected —
WSA8845H affected —
WSA8850 affected —
WSA8850W affected —
WSA8855C affected —
X1E80100 affected —
XRV7209 affected —
XRV9209 affected —

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Qualcomm Subscribe
Snapdragon Subscribe

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html cve-icon cve-icon
History

Mon, 21 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm snapdragon
Vendors & Products Qualcomm
Qualcomm snapdragon

Thu, 17 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 17 Sep 2026 04:30:00 +0000

Type Values Removed Values Added
Description Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
Title Buffer Over-read in BT Controller
Weaknesses CWE-126
References
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2026-09-17T14:34:49.663Z

Reserved: 2026-01-21T12:51:13.995Z

Link: CVE-2026-24081

cve-icon Vulnrichment

Updated: 2026-09-17T14:34:45.811Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-17T05:17:00.170

Modified: 2026-09-18T19:06:08.407

Link: CVE-2026-24081

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-21T15:45:15Z

Weaknesses